Qualys Integration with DefectDojo
Qualys is a cloud-based vulnerability management, detection, and response (VMDR) platform that provides comprehensive security and compliance solutions including continuous vulnerability scanning, web application security testing, container security, patch management, and threat detection across on-premises, cloud, and hybrid IT environments with industry-leading accuracy. The platform leverages automated scanners, cloud agents, and passive network sensors to continuously discover IT assets, identify security vulnerabilities and misconfigurations, prioritize risks using TruRisk scoring with real-time threat intelligence, and deliver integrated remediation capabilities with detailed compliance reporting aligned with PCI-DSS, HIPAA, NIST, and other regulatory standards throughout the enterprise security lifecycle.
Data Granularity: What Gets Imported
The following fields are captured from Qualys results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Qualys",
"engagement": "<engagement-id>",
"file": "results.json"
}